Chinese-made cargo equipment enables cyber, espionage risks in US ports


A year-long probe led by GOP members of two House panels found that numerous seaports around the U.S. contain technology originating from Chinese manufacturers that could enable espionage and sabotage.

The study conducted by lawmakers and staff on the House Homeland Security Committee and Select Committee on the Chinese Communist Party said that it was an “open secret” around port operators that Chinese crane manufacturer Shanghai Zhenhua Heavy Industries Company Limited — or ZPMC — would “pressure” them to provide remote access into the system on grounds that it can help with equipment monitoring and diagnostics.

Read more…
Source: Next Gov News


Sign up for our Newsletter


Related:

  • Feds get 3 days to patch N-able God mode flaw under active exploit

    August 4, 2026

    The US Cybersecurity and Infrastructure Security Agency (CISA) has added an exploited N-able vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, giving federal agencies three days to patch a flaw that could let attackers reach managed service provider (MSP) customers. Attackers exploiting the flaw can gain “full administrative access to an N-central console,” Tracked as CVE-2026-18577 (8.2 ...

  • FBI: Alert to Countries, Companies, and Other Entities Regarding North Korean IT Workers

    July 31, 2026

    North Korea relies upon a network of skilled Information Technology (IT) workers, deployed within and outside of North Korea, to obtain false identities and remotely earn income to fund North Korea’s unlawful nuclear weapons and ballistic missile programs. North Korean IT workers impersonate nationals of other countries to obtain work and income through online platforms operated ...

  • Iran-linked CyberAv3ngers suspected in attacks on Minnesota water systems

    July 29, 2026

    Security researchers at Tenable suspect the Iran-linked faux hacktivist outfit CyberAv3ngers was behind the cyberattack that disrupted more than 30 Minnesota water facilities. Neither state-level nor federal officials have made any claims regarding attribution for the attacks, however, Tenable reckons the operational pattern is consistent with the crew’s previous raids, noting the timing relative to recent government warnings. The ...

  • U.S. accuses American of allegedly wiping his phone using a ‘duress’ password during border search

    July 24, 2026

    The U.S. Justice Department is prosecuting an American for allegedly providing U.S. border authorities with a passcode that wiped the contents of his phone, according to an indictment and media reports. This is thought to be the first known case in the United States where federal prosecutors have charged someone for the alleged destruction of data ...

  • CISA has expanded the scope of its alert on Iranian-affiliated hackers attacking critical infrastructure

    July 23, 2026

    The US Cybersecurity and Infrastructure Security Agency (CISA) has expanded the scope of its alert on Iranian-affiliated hackers attacking critical infrastructure, including water and energy facilities. The original advisory focused on programmable logic controllers (PLCs) manufactured by Rockwell Automation/Allen-Bradley. The update warns that the activity may also target devices from Schneider Electric, Siemens, “and potentially other branded/manufactured PLCs.” The conflict between ...

  • Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite

    July 23, 2026

    A group of Russian state-supported cyber actors has been targeting and compromising various Western government and commercial organizations using the Zimbra Collaboration Suite (ZCS) software since at least July 2025. The Russian state supported advanced persistent threat (APT) group’s activity is tracked in the cybersecurity community under several names (see Cybersecurity industry tracking), primarily as ...